BEACON

← candidates

npm @vention/vention-cli @0.19.0

score
0.8615 high
flagged 2026-06-05 14:37
signals by category
cadence 1 topology 1 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 3 versions in last 24h: ['0.18.6', '0.18.7', '0.19.0']
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/VentionCo/machine-cloud.git' also claimed by 3 package(s) under different publishers: ['npm/@vention/machine-apps-components', 'npm/@vention/machine-ui', 'npm/@vention/machine-logic-ui-sdk']
enrichment
repo_doesnt_exist 1.0 claimed repo VentionCo/machine-cloud returns 404 on github.com

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "yann.thibodeau",
    "brandonlheureux",
    "vention-security",
    "vention-ci"
  ],
  "versions": 71
}

Evidence (package doc at flag time)

{
  "dependencies_count": 4,
  "dist": {
    "integrity": "sha512-pOrYo0t1deJEqYUA5IkZ52jD57sPWTWCUc9mpELT274zucp5ND4PPgTDmZxWjdDFnQ3YWiTOqnFHuSUFeLJoZA==",
    "tarball": "https://registry.npmjs.org/@vention/vention-cli/-/vention-cli-0.19.0.tgz",
    "unpackedSize": 378097
  },
  "dist-tags": {
    "latest": "0.19.0"
  },
  "latest_version": "0.19.0",
  "maintainers": [
    {
      "email": "yann.thibodeau@vention.cc",
      "name": "yann.thibodeau"
    },
    {
      "email": "brandon.lheureux@vention.cc",
      "name": "brandonlheureux"
    },
    {
      "email": "security-service@vention.cc",
      "name": "vention-security"
    },
    {
      "email": "software-ci@vention.cc",
      "name": "vention-ci"
    }
  ],
  "num_versions": 72,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/VentionCo/machine-cloud.git"
  },
  "scripts": null,
  "signal_details": {
    "rapid_release": "3 versions in last 24h: ['0.18.6', '0.18.7', '0.19.0']",
    "repo_doesnt_exist": "claimed repo VentionCo/machine-cloud returns 404 on github.com",
    "shared_repo_different_publisher": "repo 'git+https://github.com/VentionCo/machine-cloud.git' also claimed by 3 package(s) under different publishers: ['npm/@vention/machine-apps-components', 'npm/@vention/machine-ui', 'npm/@vention/machine-logic-ui-sdk']"
  },
  "time": {
    "created": "2025-06-11T14:31:29.700Z",
    "modified": "2026-06-05T17:22:59.836Z"
  }
}